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1 Introduction 

We use conference matrices to define an action of the complex numbers on the 
real Euclidean vector space R n . In certain cases, the lattice becomes a 
module over a ring of quadratic integers. We can then obtain new unimodular 
lattices, essentially by multiplying the lattice D„ by a non-principal ideal in 
this ring. We show that lattices constructed via quadratic residue codes, 
including the Leech lattice, can be constructed in this way. 

Recall that a lattice A is a discrete subgroup of a finite dimensional real 
vector space V. We suppose that V has a given Euclidean inner product 
(u, v) I— ► u • v and the rank of A equals the dimension of V. In this case 
A has a bounded fundamental region in V. We call the volume of such a 
fundamental region (measured with respect to the Euclidean structure on 
V) the volume of the lattice A. 

The lattice A is integral if u • v G Z for all u, v G A. It is even if 
|u| 2 = u • u G 2Z for all u G A. Even lattices are necessarily integral. The 
lattice A is unimodular if A is integral and has volume 1. It is well known 
0, Chapter VIII, Theorem 8] that if A is an even unimodular then the rank 
of A is divisible by 8. 

For convenience we call the square of the length of a vector its norm. The 
minimum norm of a lattice is the smallest non-zero norm of its vectors. 
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2 Conference matrices 



Let I be a positive integer. A conference matrix of order n |7|, Chapter 18] is 
an n-by-n matrix W satisfying 

(a) the diagonal entries of W vanish, while its off-diagonal entries lie in 

{-1,1}, 

(b) WW T = (n — 1)/, where I denotes the n-by-n identity matrix. 

Let W„ denote the set of skew-symmetric conference matrices of order n. 

Let W G W n . Then H = I + W satisfies HH* = (/ + W){I - W) = 
I — W 2 = I + WW T = nl. As all the entries of H lie in {-1, 1} then if is a 
Hadamard matrix. Consequently |F|, Theorem 18.1] n — 1, 2 or is a multiple 
of 4. 

Suppose that n is a multiple of 4 and let I = n — 1. Fix W G W„ and 
let V = R n denote the n-dimensional real vector space under the standard 
Euclidean dot product. Then, since W 2 = —II, V becomes also a complex 
vector space when we define 

(r + sv / -/)v = v(r + sW) 

for r, s G R. Let |v| = y/v ■ v denote the Euclidean length of a vector v G 
R n . This action of C on R n transforms lengths in the obvious way. Let z* 
denote the complex conjugate of the complex number z. 

Lemma 2.1 (a) If z\, Zi G C and v±, v 2 G R n then (ziVi) ■ (z 2 V2) = 
(zi^vi) • v 2 

(b) If z G C and v G R™ i/ien |^v| = |z||v|. 

Proof Let Zj = rj + Sjy—l with rj, Sj G R. Then 

(ziVi) • (2; 2 v 2 ) = (^iVi)(2; 2 v 2 ) T 

= v x {r x I + s x W){r 2 I + s 2 W) r v'l 

= v(r x I + Sl W)(r 2 I - s 2 W)v T 

= v((rir 2 + ls 1 s 2 )I + (sir 2 - ris 2 )W / )v T 

= (^i^vi) ■ v 2 

as claimed. 

Consequently 

|,2v| 2 = (zv) ■ (z\) = (zz*\) ■ v = \z\ 2 \ ■ v = |2;| 2 |v| 2 . 

□ 

Thus for fixed nonzero z, the map v i— > 2;v is a similarity of R" with scale 
factor \z\. 
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3 Quadratic fields 



We retain the previous notation. Suppose in addition that I = n — 1 is 
squarefree. Let K denote the quadratic field Q(y/— I). Since I is square-free, 
the ring of integers of K is 



O 



1 + V-l 



a + b\J^A , i 
: a,b G Z, a = b (mod 2) > . 



In particular O is a Dedekind domain. We shall show that some of the 
familiar lattices in R /+1 are modules for the ring O. 
Let 

L = {(ax, . . . , a n ) G Z n : a x + • • • + a n = (mod 2)} 
be the D n root lattice. 

Lemma 3.1 The lattice L is an O -module. 



Proof It suffices to show that |(1 + = |v(J + W) G L whenever 

v G L . Indeed it suffices to show this whenever v lies in a generating set 
for L . Now L is generated by the vectors 2ej and + (for j ^ k) where 
denotes the j-th unit vector. Firstly + W) is a row of the Hadamard 
matrix I + W . As it contains n instances of ±1 and n is even, it lies in Lq. 
Next + Gk) (I+W) is the sum of two rows of the Hadamard matrix I + W. 
Two rows of an n-by-n Hadamard matrix agree in exactly n/2 places. Hence 
+ ejfc)(J + W) has n/2 zeros and n/2 instances of ±1. As n/2 is even 
then |(ej + e fc )(J + W) G L . This completes the proof. □ 

Now consider the set 

S = {(a 1 ,...,a n ):a j e {-1/2,1/2}}. 

The difference of two vectors in S lies in Lq if and only if those vectors agree 
in an even number of places. Thus there are exactly two cosets v + Lq as v 
runs through S. 

For each j, ~ej(I + W) G 5, and for each j and k, |(e 3 - — e k )(I + W) G L 
by Lemma |3TT| . Thus the cosets |ej(J + W) + L are identical. Let 



S + = {v G 5 : v - fea(J + G L } 

and 

5_ =S\S+. 

As ie^(H-W) - |ej-(-/ + W) = ^ L then |e^(-J + lV) G 5_ for each j. 
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If v G S then 2v has n entries ±1 and so 2v G Lq. It follows that 
L U (v + L ) is a lattice, which depends only on whether v G S + or v G 
We write L + for L U (v + L ) when v£5 + and L_ for L U (v + L ) when 
v G Both L + and L_ are isometric to the lattice usually denoted by 
|| Chapter 4, §7.3]. The lattice is unimodular for each n divisible by 4, 
and it is even unimodular whenever n is divisible by 8. 

Lemma 3.2 Ifn is divisible by 8 then the lattices L + and L_ are O-modules. 

Proof Let L = L + or L_. Then L = Lq + (v + Lq) for some v G S and 
by Lemma [TI] it suffices to show that |(1 + v— 7)v = |v(J + VK) G L. Note 



that |(Z + 1) is an even integer by the hypothesis. 

We may assume that v = |ei(±J + W). If v = + W) then 

iv(J + W) = i ei (/ + I^) 2 = ie x ((l - 0/ + 2^) = i ei (/ + W) - 

which lies in L as |e!(J + W) G L. 
If v = \e x {-I + W) then 

i v(/ + iy) = iexC-J + W)(I + W) = - A e x {-{1 + 1)/) 

which lies in L. □ 

Let 1 be an ideal of O. If M is a (9-module, then IM, defined as the 
subgroup of M generated by the am for a G X and m G M, is also a 0- 
module. 

Theorem 3.1 Suppose that I = 7 (rood #j and that 1 is a nonzero ideal of 
O with norm N = N(X). If L = L + or then 

L[I] = -^=1L 



is an even unimodular lattice. Also if I and J lie in the same ideal class 
of O, the lattices L[I] and L\J\ are isometric. 

Proof First of all we show that the index \L : XL\ equals N n ^ 2 . As an O- 
module, L is finitely generated. Also if a G O and v G L are nonzero, then 



|a:v | = |a||v| by Lemma [2.1| and so L is torsion free as an (9-module. 

By the theory of modules over Dedekind domains |[|, §9.6], as L is a 
finitely generated torsion-free module over the Dedekind domain O, then 
L = Li © • • • © L k where each Lj is isomorphic to a nonzero ideal Aj of O. 
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Each of the Aj is a free abelian group of rank 2, and as L is a free abelian 
group of rank n it follows that k = n/2. Then XL = XL\ © ■ ■ • © XL n / 2 and 

so \L : XL | = n"£ |£j : JL il- But 



I 3 ' ^ J ' j | — | m I 



|£> :ZAj\ N(XAj) 



\0:Aj\ N(Aj 



But N{XAj) = N(l)N(Aj) and so \Lj : = JV(J) = AT. Consequently 
|L : XL | = A^™/ 2 as claimed. 

We now show that L[X] is unimodular. The lattice XL is generated by 
elements u = av where a G X and v G L. Let u 3 = otjVj (j = 1, 2) with 
a, G X and v, 6 L. Then by Lemma [27 



ui ■ u 2 = («ivi) • (a 2 v 2 ) = (ai« 2 vi) • v 2 . 

But aia* G XX* = Af(X)0 [|, §VIII.l] so that. 

Ui • u 2 = A r (7v i ) • v 2 

where 7 G (9. As 7V1 G L (by Lemma |3.2|) and L is an integral lattice, then 
Uj-u 2 = (mod N). Consequently L[X] = N^^XL is an integral lattice. But 
L is unimodular, so it has volume 1. Thus XL has volume \L : XL\ = N n ^ 2 
and so L[X] = N~ l l 2 XL has volume 1. Thus L[X] is a unimodular lattice. 

We finally show that L[I] is an even unimodular lattice. Since L[I] is 
integral, to show that it is even it suffices to show that each vector u in a 
generating set of L[X] has |u| 2 even. The vectors u = A^~ 1 / 2 a;v for a G X 
and v G L generate L[X}. Then 

• 1 o 1 1 1 9 I cy. I 1 1 9 
u = — av = v . 

But \a 2 \ = aa* G XX* = NO and so \a\ 2 /N G Q n O = Z and |v| 2 is an 
even integer, as v G L, an even lattice. Thus |u| 2 is an even integer. Thus 
L[X] is an even unimodular lattice. 

Now suppose that X and J lie in the same ideal class of O. Then J = aX 
where a is a nonzero element of K. Then JL = aj~i and so 



L[J] = , I JL = - I aXL = J^fy-aL[X\. 

Let 7 = ay/N(T)/N(J). Since J = aX then N(J) = |a| 2 A^(X) and so 
I7I = 1. By Lemma |2.1| , the map v 1— > 7V is an isometry of R n and as 
L[J] = 7X[X], the lattices L[X] and L\J\ are isometric. □ 
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Given L, we can produce a maximum of h non- isometric lattices L[X] 
where h denotes the class-number of the quadratic field K. 
It is useful to note which for which ideals X is XL + C Z n . 

Lemma 3.3 Let X be an ideal of O. Then XL + C Z n if and only if ' X C 
(2, |(1 - V^l)). In this case also N(X)Z n C XL + . 

Proof Note that L + n Z n = L and so JL + C Z n if and only if XL + C L . 
This occurs if and only if J annihilates the O- module M = L + /L . This 
module has 2 elements, so it must be isomorphic to 0/ J where J is an ideal 
of norm 2. As (2, |(1 — y/—l)) has norm 2 and is seen to annihilate M as 
Kl-v 73 /) takes iei(/ + W) to ±(Z + l)ei, then J = <2, |(1 - V^l)). Thus 
J7" is the annihilator of M and the first statement follows. 

Suppose that X C (2, |(1 — v 7 — !))• The lattice L + [2] is unimodular so 
that if u • v G Z for all v G L + [X] then u G L+[Z]. If u = y/N(T)w with 
w G Z n then u • v G Z fo r all v G N(X)~ 1 / 2 Z n and as L+[2] C N{X)- l / 2 Z n 
then u G L + [X]. Hence ^N(X)Z n C L+[2] and so N(X)Z n C JL+. □ 

In this case the lattice A is the inverse image of a subgroup C of (Z/NZ) n , 
where A = N(I), under the projection 7r : Z n — > (Z/AZ) n . Such a subgroup 
is called a linear code of length n over Z/AZ. We also say that A is obtained 
from C by construction An. 

The standard dot product is well-defined on the group (Z/AZ) n . If a 
subgroup C C (Z/AZ) n satisfies u • v = for all u, v G C then C is self- 
orthogonal. Also C is self-dual if u ■ C = if and only if u G C. By the 
nondegeneracy of the dot product, C is self-dual if and only if C is self- 
orthogonal and \C\ — A™/ 2 . 

Proposition 3.1 Let X be an ideal of O with X C (2, |(1 — V—F)) and 
A(X) = A. The lattice L = XL + is obtained from construction A N from a 
self-dual linear code C of length n over Z/AZ. 

If I = (A, \(a - V-l)) with a = 1 (mod A) and a 2 = -I (mod AN) then 
C is spanned by the vectors of the form |(ej + Bj)(al — W) (1 < i < j < n). 

Proof Apart from the self-duality of C we have already proved the first 
assertion. The self-duality of C follows from the unimodularity of N~ 1 I 2 XL + . 
By volume considerations 

N n/2 = | Z n . JL+ | = KZ/JVZ)" ; C\ 

and so \C\ = A™/ 2 . Also if u, v G XL + then A~ 1 / 2 u and A _1 / 2 v lie in the 
integral lattice N~ 1 / 2 XL + so that A _1 u • v G Z. Hence C is self-orthogonal, 
and as it has the correct order, it is self-dual. 
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The ideal X contains the subgroup NZ + |(a — y— 7)Z of (9 and as this 
subgroup also has index iV in O then X = iVZ + |(a— v 7 — 7)Z. It follows that 
XL + = NL + + \(a-^fA)L + . As a = 1 (mod 4), ±(a + v 7 ^) - |(1 + v^7) is 
an even integer. It follows that L + |ei(a/ + W 7 ) = L + ^ex(I + W) and so 
L + is generated by L and u = |ei(a/ + VK). Thus iVL + is generated by the 
A^(ej + ej) and iVu and \{a — v 7 — 7)L+ is generated by the ~(e* +e_j-)(a/ — W 7 ) 
and 

iu(a/ - W) = -e^aJ - W)(aJ + W) = ^-^1. 

Note that (a 2 + Z) /4 is a multiple of N. It follows that C is generated by Nu 
and the + Gj)(al — W) . But iVu = (N/2)ei(I + W) is congruent modulo 
iV to the word consisting of all N/2s. Also (N/2)ei(aI — W) is congruent 
to the same word. We can drop the generator iVu and deduce that C is 
generated by the |(ej + &j)(al — W). □ 



4 Quadratic residue codes 

To use the above construction of lattices, we need a supply of skew-symmetric 
conference matrices. Paley || constructed a family of such matrices of order 
n = I + 1 whenever I = 3 (mod 4) is prime. To apply our theory we stipulate 
in addition that / = 7 (mod 8). We find that the lattices IL + are derived 
from quadratic residue codes in this case. 

We define a conference matrix W G W n as follows. Let 

/ 1 ... 1\ 

-1 

w = 

V- 1 / 

where the /-by-/ matrix W is the circulant matrix whose (i, j) -entry is 

where (— ) denotes the Legendre symbol. This matrix W is called a confer- 
ence matrix of Paley type. For the rest of this section W will denote this 
particular matrix. 

We follow the usual practice with quadratic residue codes and label the 
entries of a typical vector of length n = I + 1 using the elements of the 
projective line over F; as follows: v = (voo, Vq, vi, V2, ■ ■ ■ , uj-i). We let e^, 
e , e 1; . . . e|_i denote the corresponding unit vectors, that is, e M has a one in 
the position labelled /i, and zeros elsewhere. 
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Lemma 4.1 (Paley) The matrix W is a skew- symmetric conference ma- 
trix. 

Proof See for instance [JFL Chapter 18]. □ 

In O, the ideal 20 splits as a product of two distinct prime ideals: 20 = 
VQ where V = <2, |(1 + ^l)) and Q = V* = <2, |(1 - >/=/)>. We shall 
investigate the lattices L + ['P r ] and L + [Q r ] for integers r > 0. (The discussion 
for L-\P r \ and L_[Q r ] is similar.) 

We first need a lemma on the structure of the ideals V r and Q r . 

Lemma 4.2 Let r be a positive integer. Then 

V r = 2 r Z + i(t + v /z /)Z 

and 

Q r = 2 r Z + i(t- yf-t)Z 

where t is any integer with t 2 = —I (mod 2 r+2 ) and t = 1 (mod 4)- 

Proof It is well-known that if s > 3, and a = 1 (mod 8) then the congruence 
x 2 = a (mod 2 s ) is soluble. Thus there exists t with t 2 = — / (mod 2 r+2 ). 
By replacing t by — t if necessary, we may assume that t = 1 (mod 4). 
Consider the ideal J = <2 r , |(t + V^I)) of C. As 2 r e X then X is a factor 
of 2 r O = V r Q r . But as ^t + v 73 !) = |(1 + \f—l) + 2(t -1)/4gP then "P is 
a factor of X. But |(t + \/— I) ^ 0, and so 20k = VQ is not a factor of X. 
Hence X = "P 1 "' where 1 < r' < r. Letting a — |(t + \/— I) we have 

XX* = (2 r ,a) (2 r ,a*) 

= (2 2r ,2 r a,2 r a*,aa*) 

= (2 2r ,2 r a,2 r a*,{t 2 + Z)/4) 

C 2 r £> 

as t 2 = -/ (mod 2 r+2 ). But XX* = N(1)0 = 2 r> and so r = r', that is 
X = V r . 

Now P r C 2 r Z + \{t + V /Z I)Z, but both these groups have index 2 r 
in O so they are equal. The statement about Q r now follows by complex 
conjugation. □ 

We now consider the lattices Q r L + for r > 1. Since Q r C Q and Q = 
(2, |(1 - v 73 ^)) then by Proposit ion |3.1| Q r L + is obtained by construction 
A 2 r from a self-dual code C r over Z/2 r Z. We shall show that C r is the Hensel 
lift of an extended quadratic residue code in the sense of JT|. 
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Recall that the integer t satisfies t = 1 (mod 4) and t 2 = — I (mod 2 r+2 ). 
By Proposition |3.1| it follows that C r is generated by the vectors |(ej + 
e.j)(W — tl). It is plain that we need only these vectors with i = oo and so C r 
is spanned by u = e^W — t/) and Vj = ^(eoo + e^VF — t/) for < j < I. 

Let <p '■ (Z/2 r Z) n — > (Z/2 r Z)' be the map given by deleting the first co- 
ordinate of the vector. The code C r contains the vector u = (— t, 1,1,..., 1). 
As r is odd and C r is self-dual, the intersection of C r and the kernel of is 
trivial. Thus C' r = <fi{C r ) has the same order as C r . Then 0(u) is the all-ones 
vector, and 0(vj) are cyclic shifts of 0(v o ). Also 0(v o ) = (c , c%, . . . , c p _i) 
where 

f (1-0/2 ifj = 0, 
Cj = < 1 if j is a quadratic residue modulo /, 

[ if j is a quadratic nonresidue modulo /. 

Thus C' r is a cyclic code over Z/2 r Z. 

We recall the definition of quadratic residue codes. Consider the polyno- 
mial X 1 — 1 over the field F2 = Z/2Z. Then X 1 — 1 splits into linear factors 
in some finite extension F 2 fc of F 2 . In fact 

1-1 

X l -l = H(X-(i) 
where ( is a primitive l-th root of unity in F 2 fe. We write 

x l -i = (x-i)f + (x)f4x) 

where 

/+(*)= ri( x -^) and /-w= n ( x -c j )- 

070=i 070=-i 

As / = 7 (mod 8), then 2 is a quadratic residue modulo /, and so the coef- 
ficients of both / + and /_ are invariant under the Frobenius automorphism 
(5 1 — ^ <5 2 of F 2 k. Consequently both / + and /_ have coefficients in F 2 . The 
labelling of these factors as / + and /_ depends on the choice of (. Replacing 
£ by another primitive l-th root of unity either preserves or interchanges / + 
and /_. The coefficients of X^ l ~ 3 ^ 2 in / + and /_ are and 1 is some order, 
so we can, and shall, choose ( such that 

f + (X) = X^' 2 + OAC- 3 )/ 2 + • • ■ and /_ (X) = X^' 2 + X^' 2 + ■■■. 

The cyclic codes of length I over F 2 with generator polynomials f+(X) and 
f-(X) are called the quadratic residue codes. 
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Bonnecaze, Sole and Calderbank QXJ| extended the notion of quadratic 
residue code to codes over Z/2 r Z. By Hensel's lemma there exist unique 
polynomials f+(X) and f_ (X) with coefficients in Z/2 r Z such that 

x l -i = (x-i)rt\x)f?\x), 

f£\X) = f + (X) (mod 2) and / W (X) = f_(X) (mod 2). 

The cyclic codes over Z z with generator polynomials f+\X) and f_(X) are 
called lifted quadratic residue codes over Z/2 r Z. 

Theorem 4.1 The code C' r is the lifted quadratic residue code over Z/2 r Z 
with generator polynomial f+ \x). 

Proof Cyclic codes of length / over R = Z/2 r Z correspond to ideals of 
the polynomial ring R[X]/ (X 1 — l). The code C' r corresponds to the ideal 
X = (g,h) where 

g(X) = J2 Xj 

j=0 

and 

h (x) = £ xi - 

070=i 

We first consider the case where r — 1. Then X = (it(Jf)) where w(AT) is 
the greatest common divisor of g(X) and h(X). Let C be a root of f+(X) = 
in an extension field of F2. The roots of g(X) are the £ J where p \ j. As 
£ = 1 (mod 4) then |(1 — i) is even and so /i(Jf) = J2(j/i)=i ^ ■ Now 

£ C J = and £ C J = 1. 

070=i (i/0=-i 

It follows that 

MC) = £ tt a Y = 

070=i 

if and only if (f ) = 1. Thus u(X) = f+(X). 

Now we consider the general case. The reduction of C' r modulo 2 is C[. 
Any liftings to C' r of a basis of C[ generate a free R- module (of rank ~(Z + 1)), 
and so they generate the whole code C' r . As C r is free over R, it is generated 
as an ideal by a monic polynomial F(X), of degree |(Z + 1). As -F(A) reduces 

to modulo 2, and F(X) | X 1 - 1 it follows that F(X) = /j r) (X) as 

required. □ 
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Given the code C' r , the code C r can be reconstructed, since for each ele- 
ment of C' r the corresponding element of C r is uniquely determined as it is 
orthogonal to (—t, 1, 1, ... , 1). 

We now turn to V r L + . This is no longer a sublattice of Z™. 

Lemma 4.3 Let r be a positive integer. The index \P r L + : V r L + n Z n \ = 
2. The lattice V r L + fl Z n is generated by the vectors 2 r (e OQ + e M ) (ji G 
{oo, 0, 1, 2, ...,/ — 1}^, £ne vector u = e^VF + £/) and and iae vectors Vj = 
Keoo + ej)(W + */) (0 < j < I). Also V r L + is generated by V r L + n Z n and 
iu-I(t 2 + /) eoo . ' 

Proof We have V r = 2 r Z + ±(t+ v /Z 0Z. Let fi denote the lattice generated 
by the 2 r (eoo + e M ), u and the Vj. The lattice L + is generated by the + e M 
and le^itl + W). Thus 2 r (e 00 + e M ), u = ±(i + v /Z I)2e 00 and Vj = \(t + 
•>/— 0( e oc + e j) all lie in V r L + . These vectors all have integer coordinates, 
and so fi Q V r L + n Z n . 

Let Q be the lattice generated by f2 and |u — |(t 2 + ^e^. Now 

i(t + v / =I)ie 00 (t/ + ^) 



As i is odd and u G fio then f2 C V r L + . 

The lattice P r L+ is generated by fl and 2 r ~ l e 00 (tl + W) = 2 r_1 u. But 
u — |(t 2 + Z)eoo G f2 and as t 2 + I is divisible by 2 r+1 then u G fi and so 
Q = V r L + . As \u — \(t 2 + /)e oc is not in Z n but its double is in Q , then 
|fi : H | = l^ r ^+ : V r L + n Z n | = 2 and so fi = P r L + n Z n . □ 

One can now proceed to express the lattices V r L + and V r L + fl Z ra in 
terms of lifted quadratic residue codes over Z/2 r Z. For simplicity we present 
the details only for r — 1. Let T>' denote the cyclic quadratic residue code 
of length I over F 2 with generator polynomial /_pT), and let T> denote its 
extension obtained by appending a parity check bit at the front. 

Theorem 4.2 The lattice VL + fl Z™ consists of those vectors reducing mod- 
ulo 2 to elements of T> and the sum of whose entries is a multiple of 4- 
The lattice VL + is obtained from VL + fl Z n by adjoining the extra generator 







t 2 + v 



t 

2 U 



t 2 + l 
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Proof We may take t — 1 in the proof of Lemma |4]^. In this case the 
vector u is the all-ones vector while each Vj consists of |(/ + 1) ones and 
\{l + 1) zeros. As h(l + 1) is a multiple of 4 the sum of the entries of each 
of these vectors is a multiple of 4. As this is manifestly true for the vectors 
2(eoo + e M ) too, then the sum of the entries of each vector in VL + fl Z n is a 
multiple of 4. 

If we delete the first entry of the given generators of VL + and reduce 
modulo 2 we get the all-ones vector of length I and the cyclic shifts of the 
vector w = (d , di, . . . , where 



1 if j = or if j is a quadratic residue modulo I, 
if j is a quadratic nonresidue modulo I. 



By a similar argument to the proof of Theorem [4.1| these vectors generate the 
cyclic quadratic residue code V . Hence each element of VL + fl Z n reduces 
modulo 2 to an element of T>. If Q denotes the sublattice of Z n consisting of 
vectors reducing modulo 2 to T> and with the entries summing to a multiple 
of 4, then |Z n : ft| = 2 1+ ™/ 2 = |Z n : n Z n |. Thus = VL + n Z n . 

Now letting t = 1 we see that |u - \(t 2 + ije^ = - I), 1,1,..., 1) 

and so this vector together with VL + fl Z n generates VL + . □ 

In the terminology of Conway and Sloane || Chapter 5, §3], the lattice 
VL + fl Z n is obtained from the code T> by construction B. Then the lattice 
VL + is obtained by density doubling. One can extend these notions to lifted 
quadratic residue codes to produce the lattices V r L + . 

We look briefly at the lattices XL + for more general ideals X. Consider the 
case where X = A, an ideal of norm p, an odd prime. Then A = (p, t + v 73 /) 
where t 2 = —I (mod p). The rows of the matrix tl + W generate a self-dual 
linear code C over F p which turns out to be an extended quadratic residue 
code. The coordinates of vectors in L + are half-integers, and it is meaningful 
to reduce these modulo the odd prime p. Then the lattice AL + simply 
consists of the vectors in L + which reduce modulo p to elements of C. More 
generally A r L + will have a similar description in terms of an extended lifted 
quadratic residue code over Z/p r Z. Finally by splitting a general ideal X into 
a product of powers of prime ideals A r , we can describe XL + in terms of the 
various A r using the Chinese remainder theorem. 

5 Examples 

Since the ring Z[|(l + y/—7)} has class number 1 (and each even unimodular 
rank 8 lattice is isometric to the E s root lattice) the first interesting examples 
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occur when I = 15 and the first interesting examples with Paley matrices 
occur when I = 23. 



5.1 / = 23 and / = 31 

In both these cases we take W to be the Paley matrix. We first consider the 
case / = 23. 

The class group of O = Z[|(l + \J— 23)] has order 3, and the class of each 
of its ideals V = <2, |(1 + v^23)> and Q = <2, |(1 - ^23)) generates 
its class group. The lattice L + itself is the lattice D^. The lattices Q r L + 
are obtained by applying construction A 2 r to the lifted quadratic residue 
codes C r . The code C\ is the extended binary Golay code. It is plain that 
QL + is obtained by applying construction A [Chapter 5, §2] to the binary 
Golay code, and so £+[Q] is isometric to the Niemeier lattice with root 
system A 24 . 

The isometry classes of the unimodular lattices L + [Q r ] depend only on the 
congruence class of r modulo 3. If r = (mod 3) then L + [<2 r ] is isometric 
to while if r = 1 (mod 3) then L + [Q r ] is isometric to the Niemeier 
lattice with root system A 24 . To identify L + [Q r ] when r = 2 (mod 3) note 
that Q 2 lies in the same ideal class as V. Hence for r = 2 (mod 3), L + [<2' r ] 



is isometric to L + [V] . By Theorem |4]^ it is plain that L + [V] is the Leech 



lattice, as given by Leech's original construction ||. Applying Theorem [3.1| 
gives an explicit isomorphism between L + [P] and L + [Q 2 ] which is equivalent 
to that constructed in [0]. 

In general if s is the order of the class of the ideal V in the class group of O, 
then up to isometry L + [P r ] and L + [Q r ] depend only on the congruence class 
of r modulo s. Also L + [V r ] and L + [Q r } will be isometric whenever r = — r' 
(mod s). For Z = 31 we also have s = 3 and the above discussion is valid for 
/ = 31 too. In particular is isometric to L + [Q 2 ], and we recover @, 

Theorem 1]. 

We can give alternative constructions of the Leech lattice at will sim- 
ply by writing down ideals of Z[|(l + y/— 23)] equivalent to V . Let X = 
<3,|(l + v /= 23)> and J = <3, |(-1 + V^23)). Then V, J and Ql = 
(6, 1 (—5 + a/— 23)) all lie in the same ideal class. 

The lattice JL + is generated using density doubling from the lattice V 
consisting of all vectors in Z 24 whose entries sum to zero and which reduce 
modulo 3 to elements of the extended ternary quadratic residue code with 
generator matrix / — W . Then JL+ is generated by L' and the vector 
|(5, 1, 1, . . . , 1). The lattice L + \J] = 3~ 1 / 2 J'L + is isometric to the Leech 
lattice. 
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Next consider the lattice QZL + . This consists of the vectors in Z 24 reduc- 
ing modulo 2 and modulo 3 to elements of appropriately chosen binary and 
ternary quadratic residue codes. The binary code in question is that gener- 
ated by vectors ^(e^ + e a )(J — W) for a G {oo, 0, 1, 2, ...,/ — 1} and the 
ternary code is generated by the rows of I + W. Then L + [QZ] = Q~ l l 2 QIL + 
is isometric to the Leech lattice. 

5.2 / = 47 

Again we take W to be the Paley matrix. In Chapter 7, §7] the lattice A = 
P^8q is described. This is an even unimodular lattice of rank 48 and minimum 
norm 6. It is generated by the following vectors (doo, a , ax, ■ ■ ■ , am)' 

(i) (1/VT2)(-5,1,1,...,1), 

(ii) those vectors of the shape (l/v^3)(l 24 , 24 ) supported on the translates 

modulo 47 of the set {0} U Q where Q is the set of quadratic residues 
modulo 47, 

(hi) all vectors of the shape (l/ v / 3)(±3 2 , 46 ). 

It is more convenient to consider instead the equivalent lattice A' generated 
by the vectors 

(i) ' (l/v / 12)(5,l,l,...,l), 

(ii) ' those vectors of the shape (l/v / 3)(l 24 , 24 ) supported on the translates 

modulo 47 of the set {0}UA^ where N is the set of quadratic nonresidues 
modulo 47, 

(hi)' all vectors of the shape (l/ v / 3)(±3 2 , 46 ). 

We claim that A' is the lattice L+[X] where X = (3, ±(1 - Note 
that the norm of X is 3. It suffices to show that each of the generating vectors 
for A' is contained in L + [X]. Since each vector of shape (±1 2 , 46 ) lies in L + 
and 3 G P then it is immediate that the vectors of type (in)' lie in L + [X]. The 
vectors of type (ii)' are the differences of the first row and an arbitrary other 
row of the matrix (1/2-^/3) (I — W). Since |(1 — y/— 47) G X, the vectors of 
type (ii)' lie in L + [I). Finally, §(1, -1, -1, . . . , -1), the first row of \{I-W), 
lies in IL + . Also v = |e (J + W) G L + and 3v = |(3, 3, 3, . . . , 3) G 1L + . 
Adding these two vectors gives |(5, 1, 1, . . . , 1) G 1L + so that the vector of 
type (i)' does lie in L + [X]. 

The ideal (|(1 — a/— 47)) has norm 12 and factors as Q 2 X. The class 
number of Q(a/— 47) is 5, and so [X] = [P 2 ] = [<2 3 ]. Thus A' is isometric to 
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Z/ + [<2 3 ], which is constructed using construction A from the quadratic residue 
code of length 48 over Z/8Z. 



5.3 1 = 15 

In this case there is no Paley matrix. We consider two different conference 
matrices of order 16. 

If W e W n then the 2n-by-2n matrix 

W>=( w I + w ) 
\-I + W -w J 

is a skew-symmetric conference matrix of order 2n. Applying this construc- 
tion four times to the zero matrix in Wi gives the matrix 



W 1 = 
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where, for convenience, we have denoted 1 and — 1 by + and — respec- 
tively. The ideal class group of Z[|(l + \/ — 15)] has order 2. The ideal 
X = (2, |(1 — a/— 15)) is not principal and TL + is given by construction A 
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from the binary code with the generator matrix 



/1001010100000000\ 
0101001100000000 
0011011000000000 
0000111100000000 
0000000010000111 
0000000001001011 
0000000000101101 
\0000000000011110/ 

Thus L + [X] is isometric to the orthogonal direct sum of two copies of the D% 
lattice. This is not isometric to L + . 

Another conference matrix of order 16 is 

/ + + + + + + + + + + + + + + +\ 

-0 + + - + -- + - + + - + -- 

--0+ + - + - + -- + + - + - 

---0+ + - + + -- - + + - + 

- + -- 0+ + - + + -- - + + - 
-- + -- + + + - + -- - + + 

- + - + -- 0+ + + - + -- - + 

- + + - + -- 0+ + + - + -- - 
--------0+ + + + + + + 

- + + + - + -- -0-- + - + + 
-- + + + - + -- +0-- + - + 
--- + + + - + - + +0-- + - 

- + -- + + + -- - + +0-- + 
-- + -- + + + - + - + +0-- 

- + - + -- + + -- + - + +0- 

V- + + - + -- + -- - + - + + o/ 

In this case the lattice XL + is obtained using construction A applied to the 
binary code with generator matrix 

/1000000001111111\ 
0100000010111111 
0010000011011111 
0001000011101111 
0000100011110111 
0000010011111011 
0000001011111101 

\0000000111111110y 



Wo 
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Thus L + [X] is isometric to the Df 6 lattice and so to L + . This example shows 
that the isometry class of L + [X] depends on the choice of the conference 
matrix W, and also that L + [X] and L + [J] may be isometric even when X 
and J are in different ideal classes. 
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